atsec information security
Common Criteria, FIPS 140-3, EUCC, NESAS, PCI and more.
Who we are
atsec information security is an independent, privately-owned company that focuses on providing laboratory testing, evaluation, validation, and training services for information security.
Where we are
atsec USA:
atsec Europe:
atsec Asia:
See you at
PCI Community Meeting
November 11-12 2026, Kuala Lumpur, Malaysia
Omnisecure
January 18-21 2027, Berlin, Germany
The CVA
atsec is a proud founding member of the Crypto-V Alliance (CVA), a non-profit organization that provides a neutral forum where organizations can collaborate to advance cryptographic assurance and strengthen digital security. The CVA hosts the annual FIPS ‘n’ Chips conference, bringing together testing labs, academics, government officials, and vendors under one roof, and atsec helps organize the event.
atsec also holds a position on the CVA’s board.
CMUF
As a companion to the ICMC, atsec created the Crypto Module User Forum (CMUF) in 2014 to make a space for sharing ideas and inspiring innovation among crypto module professionals. With Amazon generously providing the cloud platform and atsec hosting the forum portal, we’re happy to make this resource freely available to CMUF members. atsec also serves as the liaison officer between the CMUF and ISO/IEC JTC1/SC27 WG3 that develops the international standards for cryptographic module validation. atsec also started the International Cryptographic Module Conference in 2013 as a way to gather everyone together.
CCUF
atsec played an instrumental role in creating the Common Criteria User Forum (CCUF) for evaluators, vendors, and certification bodies to discuss the Common Criteria (CC) standard and has been a member of the CCUF management board since its inception. atsec also contributes to many TCs/iTCs (International Technical Communities) to develop Protection Profiles, such as ND cPP, DSC cPP, DBMS cPP, GPOS PP, Application SW PP, and more, and up until the ISO/IEC 15408:2022 publication, atsec was an active ISO editor for CC.
Our Services
How can we be of service?
We provide services for a variety of business cases and industries.
IT Product
Evaluation & Assessment
atsec information security offers IT evaluation and assessment services, focusing on standards-based evaluations of commercial off the shelf (COTS) hardware, software, and organizational security. Key services include Common Criteria (ISO 15408) evaluation, Open Trusted Technology Provider Standard (O-TTPS) development, and IEEE 2621 certification for medical device cybersecurity.
Cryptographic Testing
atsec information security provides FIPS 140-3 testing services to help clients understand the requirements and assess product readiness, and performs conformance testing for the Cryptographic Algorithm Validation Program (CAVP) and Entropy Source Validation (ESV) to ensure proper implementation and compliance with standards.
Telecommunication
atsec information security offers GSMA NESAS Audits and SCAS Testing, part of the Network Equipment Security Assurance Scheme (NESAS) jointly led by 3GPP and GSMA. These services are available to all vendors of network equipment products supporting 3GPP-defined functions. We also provide BSI NESAS services within this collaborative framework, along with Mobile Device Security Certification (MDSCert).
Identity
atsec information security provides testing services for NIST Personal Identity Verification Program (NPIVP), ensuring compliance with FIPS 201 standards for U.S. Federal identification products. Additionally, atsec China is an accredited lab for FIDO, supporting secure, passwordless authentication standards.
IT Product Certification
atsec Sweden is an accredited private Certification Body according to ISO / IEC 17065, specialized in Common Criteria ISO 15408 and 18045, offering a certification scheme in collaboration with 17025 accredited laboratories. Our private Certification Body is accredited by Sweden’s national accreditation body, SWEDAC, against requirements specified in the CC ISO 15408 and 18045.
Payment Security
As a qualified PCI QSA, ASV, Secure Software & Secure SLC assessor, P2PE, 3DS assessor, PIN security assessor, CPSA, and PFI, atsec China offers a full range of services to support organizations in achieving PCI compliance. atsec has also contributed to the payment security industry since the beginning as a Global Executive Assessor Roundtable member.
Are you ready?
Read our quick start guide and take the first step on your journey to certification.
The Information Security Provider
Read Our Latest Blog Articles
Learn the latest and greatest about information security. You’ll find insights and analyses of recent developments in technology and policy on our blog.
-
From the Forum to the Future: atsec Sponsors the 30th CCUF Workshop in Rome
On September 25, 2026, the Common Criteria community gathered in Rome for the second day of the 30th CCUF Workshop.
-
CNSA Compliance to be Mandatory Starting in 2027
NIAP has set dates for CNSA 1.0 enforcement and CNSA 2.0 compliance.
atsec information security
Join our team!
Seeking a new challenge? We are a dedicated team in a fast-growing market. Send us your application.